react16-ssr

CVE-2018-6341 https://vulners.com/cve/CVE-2018-6341 A simple PoC to reproduce XSS vulnerability Steps npm i npm run start Go to localhost:3006...

exploit-workshop

exploit-workshop In this step by step workshop you'll learn how to exploit various real world vulnerabilities existing in vulnerable versions of packages in a Node.js and Java application. Required software you need to install for this workshop You can do this workshop in 2 different flavours Usi...

CVE-2024-30270-PoC

This script is designed to exploit vulnerabilities in a Mailcow instance using Cross-Site Scripting XSS and Remote Code Execution RCE. The script aims to: Inject an XSS payload into a Mailcow web interface. Use the XSS payload to execute unauthorized actions. Achieve RCE by overwriting a server...

CVE-2021-39475

CVE-2021-39475 XSS on admin reviews page https://www.warcloudsecurity.com/ecommerce/admin/reviews.php?action=preview&rID=1&page=0...

blackboard-xss

This repository does not have a README...

xsshunter

DEPRECATED - TRY THE NEW EXPRESS VERSION See here for more info: https://github.com/mandatoryprogrammer/xsshunter-express XSS Hunter Source Code This is a portable version of the source code running on https://xsshunter.com. It is designed to be easily-installable on any server for security...

CVE-2026-111410

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in E2Pdf.com e2pdf e2pdf allows Stored XSS.This issue affects e2pdf: from n/a through 1.32.57...

FOQUZ Platform XSS

The vulnerability of the FOQUZ platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

FOQUZ Platform XSS

The vulnerability of the FOQUZ platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

CVE-2022-29380

CVE-2022-29380 CVE-2022-29380 Date: 25/05/2022 Author: OpenXP Team Software: Academy LMS Version: Academy LMS = v4.3 Type: Cross-Site Scripting OWASP TOP 10: A03:2021-Injection CWE: CWE-79 Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' References:...

CVE-2022-33075

CVE-2022-33075 Exploit Title: Zoo Management System 1.0 - Stored Cross-Site-Scripting XSS Date: 05/26/2022 Exploit Author: Angelo Pio Amirante Vendor Homepage: https://www.sourcecodester.com/ Software Link: https://www.sourcecodester.com/php/15344/zoo-management-system-phpoop-free-source-code.htm...

EUVD-2026-104254

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in E2Pdf.com e2pdf e2pdf allows Stored XSS.This issue affects e2pdf: from n/a through 1.32.57...

XSS-Scanner

XSS Scanner Cross-Site Scripting XSS is one of the most well known web application vulnerabilities. It even has a dedicated chapter in the OWASP Top 10 project and it is a highly chased vulnerability in bug bounty programs. The scanner gets a link from the user and scan the website for XSS...

CVE-2024-40509

CVE-2024-40509 Cross Site Scripting vulnerability in openPetra v.2023.02 via the serverMFinDev.asmx function. Description : An unauthenticated user can steal cookies from authenticated user, by exploiting a XSS in openPetra v.2023.02 via the serverMFinDev.asmx function. Vulnerable Product Version...

-create-a-vulnerable-Docker-environment-that-is-susceptible-to-CVE-2023-30212

create a vulnerable Docker environment that is susceptible to CVE 2023-30212 Description Docker environment and exploit the CVE-2023-30212 vulnerabilityVE-2023-30212 is a security vulnerability that affects versions of OURPHP prior to or equal to 7.2.0. This vulnerability allows for Cross-Site...

CVE-2022-23808

phpMyAdmin Exploit Exploit Title : phpMyAdmin 5.1.1 - XSS Cross-site Scripting Exploit Author : Dipak Panchal @th3.d1p4k Vendor Homepage : https://www.phpmyadmin.net Software Link : https://www.phpmyadmin.net/files/5.1.1/ Affected Versions : phpMyAdmin versions of the 5.1 branch prior to 5.1.2 ar...

Scanner-and-Patcher

Scanner and Patcher Overview: The Scanner and Patcher project is built as part of the AlphaSecure framework, which has been presented and published at ACM IC3 2024 under the title AlphaSecure: A State-of-the-Art Framework for Web Application Vulnerabilities Detection and Patch Recommendation Usin...

cve-2025-0133

CVE-2025-0133 Scanner Palo Alto PAN-OS GlobalProtect Reflected XSS vulnerability scanner. Features Single target & mass scanning Multi-threaded configurable Proxy support Burp, ZAP, etc. Colored output with summary Save vulnerable URLs to file Installation Via pip from GitHub pip install...

CVE-2026-47761

👋 Hello ! Security Research 🛡️ CVE-2026-47761 – Security Researcher Type : Stored Cross-Site Scripting XSS Product : TinyMCE References : CVE : https://nvd.nist.gov/vuln/detail/CVE-2026-47761 GHSA : https://github.com/tinymce/tinymce/security/advisories/GHSA-vg35-5wq7-3x7w Hall of Fame...

CVE-2023-43877-RiteCMS-Stored-XSS---Home

Rite CMS v3.0 Multiple Stored XSS Author: Sergio Description: Rite CMS 3.0 is affected by a Multiple Cross-Site scripting XSS stored vulnerability that allows attackers to execute arbitrary code via a payload crafted in the Home Page fields in the Administration menu. The payload will be executed...